Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/c877Z-KZVo2i7TZWjLPsRGtHNQ4.roa
File: c877Z-KZVo2i7TZWjLPsRGtHNQ4.roa (raw, json)
Hash identifier: eNoff6KnFWhNyt02QOMded+8AM1mzP73aJ5VahE1wwo=
Subject key identifier: 73:CE:FB:67:E2:99:56:8D:A2:ED:36:56:8C:B3:EC:44:6B:47:35:0E
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 018570DE318336CD1E83E91E355EE905B2C7
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/c877Z-KZVo2i7TZWjLPsRGtHNQ4.roa
Signing time: Mon 02 Jan 2023 05:04:47 +0000
ROA not before: Mon 02 Jan 2023 05:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34893
IP address blocks: 185.112.53.0/24 maxlen: 24
185.112.52.0/24 maxlen: 24
185.112.54.0/24 maxlen: 24
194.30.181.0/24 maxlen: 24
2a06:6540:1003::/48 maxlen: 48
2a06:6541:1002::/48 maxlen: 48
2a06:6541:1003::/48 maxlen: 48
2a06:6541:1000::/48 maxlen: 48
2a06:6540:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:31:83:36:cd:1e:83:e9:1e:35:5e:e9:05:b2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 2 05:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73cefb67e299568da2ed36568cb3ec446b47350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:09:0d:ae:13:54:5b:66:df:ea:ef:e7:26:
37:9a:82:59:c9:bd:2e:c9:27:c5:be:4d:61:95:f3:
f1:cb:b9:de:00:07:04:4a:58:13:f8:0d:b2:d4:cb:
49:ef:b9:be:bc:51:7a:07:aa:5a:43:44:c0:78:cf:
98:e1:66:1d:e1:7d:47:ac:03:5a:9f:0e:cf:37:32:
ec:4e:c0:9f:6d:0f:05:b7:3c:f5:8e:64:27:39:2a:
c6:7b:a1:60:42:f9:98:bd:bd:44:31:ae:64:f6:30:
8f:8c:f7:16:8a:8e:8f:1d:40:68:c7:38:e4:af:76:
ef:10:16:1a:c5:de:ce:98:00:ed:bb:29:a5:47:5e:
33:e5:92:09:41:d3:b8:77:15:fc:e6:fe:23:3c:a2:
e8:3f:92:30:08:03:34:f1:62:d8:ef:bd:07:1b:4a:
fe:97:d1:00:50:5f:4f:5e:b1:c3:95:bc:78:e3:74:
28:15:b3:bf:7b:94:7e:f7:e3:90:b7:7f:e3:ec:08:
5e:b0:39:0b:3d:48:b5:72:e6:b1:85:03:62:14:10:
30:40:be:cb:5a:6f:d8:1b:e3:6b:95:81:40:80:6f:
79:ce:9b:19:66:62:b5:57:ca:f7:54:d6:4c:a5:42:
aa:b7:a6:db:19:d3:a7:0e:65:e9:21:37:cb:89:ce:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CE:FB:67:E2:99:56:8D:A2:ED:36:56:8C:B3:EC:44:6B:47:35:0E
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/c877Z-KZVo2i7TZWjLPsRGtHNQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.52.0-185.112.54.255
194.30.181.0/24
IPv6:
2a06:6540:1000::/48
2a06:6540:1003::/48
2a06:6541:1000::/48
2a06:6541:1002::/47
Signature Algorithm: sha256WithRSAEncryption
5d:c7:8b:a1:a4:b8:4f:77:19:15:8e:33:c0:90:80:f2:c6:fc:
f0:3d:4c:65:86:28:6b:94:05:c6:48:b1:82:d6:19:7c:ba:3d:
c6:ca:b3:88:d1:1d:ac:cf:35:f3:be:d7:19:1d:01:87:93:08:
84:75:ac:b6:fe:d9:9b:51:c4:18:65:3d:a7:e3:2a:b0:68:7e:
12:13:75:2c:7d:42:48:9e:13:c1:eb:68:0d:74:66:0e:b2:73:
fb:70:3f:f2:a4:eb:ca:cc:0c:97:a3:26:eb:b4:b8:3a:19:c1:
9c:79:1f:63:e3:27:aa:64:d1:df:1d:a5:79:87:1d:38:87:f5:
d7:7b:c9:29:37:40:e0:cf:ec:e6:07:02:4f:36:0d:ed:09:5a:
52:7b:6f:78:0c:6a:62:12:94:8f:d1:09:0f:c6:73:3c:2f:a0:
08:1d:13:ee:68:87:bd:b8:7e:77:cf:b0:06:13:24:88:e3:2c:
66:f9:ec:7c:37:c2:f4:fc:d0:ae:87:03:07:01:66:38:0d:b9:
d8:6f:9c:4a:27:bb:ec:c3:a5:6f:e9:e2:de:b9:f1:ce:ca:d1:
10:bb:ec:3c:4d:aa:3c:b8:eb:77:20:9c:8e:16:67:35:2f:3d:
1d:37:c2:90:20:43:73:3e:59:85:31:03:42:3b:85:82:d5:c3:
16:29:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:08 2024 by rpki-client on console-fra.rpki-client.org